using "winbind use default domain" is a nogo option if you use trusted domains. It's a bad idea to use this parameter even in most other cases. Simple trust setups like this are known to work when the configuration is okay.